SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files
A critical command injection flaw in SGLang, tracked as CVE-2026-5760 and scored 9.8 out of 10.0, allows remote code execution through the "/v1/rerank" endpoint when a victim loads a malicious GGUF model file whose crafted tokenizer.chat_template parameter...